This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json)
Hash identifier: bW45T1ETRGcbnmODuZ9m+FZK/m4gy/F/lXd7XScOGfg=
Subject key identifier: BC:88:AE:62:76:7D:7B:37:83:6E:C9:E5:8A:7D:6A:D9:29:06:EC:CB
Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
Manifest number: 022D
Signing time: Sun 25 Jan 2026 01:23:11 +0000
Manifest this update: Sun 25 Jan 2026 01:23:10 +0000
Manifest next update: Sun 01 Feb 2026 01:23:10 +0000
Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: llOyYpQHoYrAgpWEanVPNPlGz8eAKSkbIENYDmwy2AI=)
2: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: aofCiOxgu230c2okSE21A+aHeYBi7AAC6o4NTY9wGZ0=)
3: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: U968Llmzb3jWw26fQxZG3aI5FpyZByzOIMMAng6m65I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:23:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Validity
Not Before: Jan 25 01:23:10 2026 GMT
Not After : Feb 1 01:23:10 2026 GMT
Subject: CN=6975707f-b64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:4d:ff:50:cc:16:e1:ed:50:52:55:24:b0:
67:02:08:09:c7:6b:14:2f:59:09:15:ef:9a:8f:8d:
b3:3a:62:8d:18:2a:8a:09:93:a4:7b:57:6e:86:85:
bc:f0:16:d5:8d:2d:84:c0:d6:a4:38:c5:ca:0d:ed:
d2:f3:aa:04:67:93:5e:4d:12:5e:df:e1:1c:d2:71:
cc:8c:a1:78:62:54:a4:2d:36:34:50:9d:ad:29:97:
59:c6:11:55:cf:37:d4:59:08:bf:aa:51:6b:5e:fa:
67:da:ef:b9:71:f9:28:a3:84:07:0c:51:35:ff:ce:
8e:7d:62:a1:8c:85:5a:8d:75:88:59:eb:c4:e7:ac:
b6:f1:ee:b1:ad:2f:4a:4a:44:ae:8d:0f:9b:39:ea:
3e:92:a4:5b:fd:18:cd:49:72:00:8c:ab:11:42:6e:
a8:5c:f4:da:f1:9c:94:a1:ae:14:e0:47:7d:09:13:
77:47:4c:ef:9b:99:59:e1:d5:68:28:54:dd:f8:01:
d0:a2:c7:38:1d:a8:42:34:8b:b8:68:6f:9d:ce:9a:
e2:45:0a:9a:8e:ea:6b:fc:f6:63:ef:53:b2:7b:0d:
95:52:af:08:9d:2b:0d:1c:d1:0b:e3:93:f8:54:86:
39:54:d5:5b:2e:3f:ee:87:2c:3b:62:97:77:fa:3a:
b0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:88:AE:62:76:7D:7B:37:83:6E:C9:E5:8A:7D:6A:D9:29:06:EC:CB
X509v3 Authority Key Identifier:
keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:1c:dd:99:ff:89:42:c5:f9:18:7e:d9:00:9d:cb:71:2f:dd:
fb:42:cb:a0:a8:6d:7e:4d:98:f0:f7:63:90:fd:aa:1c:f9:30:
63:ff:aa:62:33:62:f4:ed:43:61:d9:cd:1a:86:9b:fe:5b:51:
dd:63:da:8a:12:b0:f7:ad:46:61:a8:40:76:9f:d1:28:e7:4c:
93:9b:46:3f:6a:35:24:40:e3:a1:b9:f3:ba:28:5c:e2:69:be:
f5:9c:00:92:a6:b6:15:a6:01:83:5d:53:47:13:1b:2e:63:a5:
0a:1f:89:8d:b3:89:b6:fd:bf:45:98:55:60:dc:74:34:15:88:
41:ce:91:1b:b6:51:2a:2f:49:c4:c0:fe:7c:5c:a9:84:f2:a1:
b4:61:97:b3:dd:49:f1:47:47:d2:20:aa:62:3b:65:52:d7:16:
f1:c5:16:10:a6:4a:2b:4c:6e:c7:be:c2:fb:5a:02:8d:93:03:
7b:70:f3:6c:53:e4:15:d9:41:a2:7d:68:fd:d5:22:c5:ab:1a:
ba:de:b3:4e:49:51:2a:91:47:81:a9:e4:76:c8:b2:e0:13:83:
07:5c:ed:21:69:89:93:0b:65:db:1e:74:8a:a6:1c:b8:e2:af:
b0:cd:5e:a9:06:e0:6b:03:8e:18:cd:c4:91:f3:cf:d6:44:c5:
17:f4:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:05:44 2026 by rpki-client